News for hackers. Stuff that matters.

A comment on Meshbird – Distributed private networking. Parent comment

Re:Meshbird – Distributed private networking by miovoid on Monday February 13, 2017 @10:25PM (#13640912)
Good point. We are going to implement AES-GCM encryption based data transfer. Why AES-GCM to solve HMAC missing? Because Go have low-level asm optimisations. This is open way to full utilization of 10G/40G networks.
[ Parent | on HN ]
Re:Meshbird – Distributed private networking by wtbob on Monday February 13, 2017 @11:01PM (#13641037)
Seriously, I'd advise that you implement an HMAC today, and implement GCM tomorrow — using raw CTR mode really is that dangerous. And make sure that you never ever ever reuse IVs, ever.

This sort of thing is incredibly dangerous. Props to you for coming up with a great UX, but crypto is very, very difficult to get right.

[ Parent | on HN ]